summaryrefslogtreecommitdiff
path: root/app/views/admin/users
Commit message (Collapse)AuthorAgeFilesLines
* Fix confusing description of a blocked user.Elias Werberich2016-08-021-5/+3
|
* Remove unnecesary CSS classAlfredo Sumaran2016-07-141-1/+1
|
* Add min attribute to project_limit field on user's formAndrey Krivko2016-07-081-1/+1
|
* Revert "Revert "Merge branch 'issue_3946' into 'master' ""Robert Speicher2016-07-072-101/+111
| | | | This reverts commit bf2a86b73cce332ff8f4392ffc8df501193f32ec.
* Revert "Merge branch 'issue_3946' into 'master' "Robert Speicher2016-07-072-111/+101
| | | | | This reverts commit 68155ee73b549a4f79744bb325542c29d45c71ea, reversing changes made to 7ebd011ed1de7aee706f07a53c63c90f1c8aa5d4.
* Rephrase deletion alert messageAlfredo Sumaran2016-07-071-1/+1
|
* Layout for Users Groups and Projects on admin areaAlfredo Sumaran2016-07-072-101/+111
|
* Remove unnecessary parenscode_style_fixesValery Sizov2016-06-301-1/+1
|
* Fix an information disclosure when requesting access to a group containing ↵Rémy Coutable2016-06-241-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | private projects The issue was with the `User#groups` and `User#projects` associations which goes through the `User#group_members` and `User#project_members`. Initially I chose to use a secure approach by storing the requester's user ID in `Member#created_by_id` instead of `Member#user_id` because I was aware that there was a security risk since I didn't know the codebase well enough. Then during the review, we decided to change that and directly store the requester's user ID into `Member#user_id` (for the sake of simplifying the code I believe), meaning that every `group_members` / `project_members` association would include the requesters by default... My bad for not checking that all the `group_members` / `project_members` associations and the ones that go through them (e.g. `Group#users` and `Project#users`) were made safe with the `where(requested_at: nil)` / `where(members: { requested_at: nil })` scopes. Now they are all secure. Signed-off-by: Rémy Coutable <remy@rymai.me>
* Add sub links to overviewAnnabel Dunstone2016-06-151-98/+101
|
* Add request access for groupsRémy Coutable2016-06-142-3/+2
| | | | Signed-off-by: Rémy Coutable <remy@rymai.me>
* Start builds redesignAnnabel Dunstone2016-05-041-1/+1
|
* disable spellcheck and autocorrect for username field in admin pageArinde Eniola2016-04-201-3/+3
|
* Standardize the way we check for and display form errorsrs-form_errorsRobert Speicher2016-04-041-5/+1
| | | | | | | | | | | | - Some views had a "Close" button. We've removed this, because we don't want users accidentally hiding the validation errors and not knowing what needs to be fixed. - Some views used `li`, some used `p`, some used `span`. We've standardized on `li`. - Some views only showed the first error. We've standardized on showing all of them. - Some views added an `#error_explanation` div, which we've made standard.
* Improve external users featureZeger-Jan van de Weg2016-03-142-3/+5
|
* Create an external users tab on Admin user listZeger-Jan van de Weg2016-03-132-1/+6
| | | | Also incorporates the review into this, mainly spec changes.
* External UsersZeger-Jan van de Weg2016-03-132-0/+9
| | | | | The user has the rights of a public user execpt it can never create a project, group, or team. Also it cant view internal projects.
* Improve consistency of SSH Keys title in administration areassh-key-settingsRobert Speicher2016-03-031-1/+1
|
* Removed sorted text from dropdownsPhil Hughes2016-01-281-1/+1
| | | | Closes #12796
* Merge branch 'remove-gray-bg'Dmitriy Zaporozhets2016-01-142-101/+97
|\ | | | | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
| * Dont use nav-pills. Instead use nav-listsDmitriy Zaporozhets2016-01-131-96/+91
| | | | | | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
| * Replace nav-tabs with nav-linksDmitriy Zaporozhets2016-01-131-1/+2
| | | | | | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
* | Merge branch 'feature/ldap-sync-edgecases' into 'master' Douwe Maan2016-01-141-10/+15
|\ \ | |/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | LDAP Sync blocked user edgecases Allow GitLab admins to block otherwise valid GitLab LDAP users (https://gitlab.com/gitlab-org/gitlab-ce/issues/3462) Based on the discussion on the original issue, we are going to differentiate "normal" block operations to the ldap automatic ones in order to make some decisions when its one or the other. Expected behavior: - [x] "ldap_blocked" users respond to both `blocked?` and `ldap_blocked?` - [x] "ldap_blocked" users can't be unblocked by the Admin UI - [x] "ldap_blocked" users can't be unblocked by the API - [x] Block operations that are originated from LDAP synchronization will flag user as "ldap_blocked" - [x] Only "ldap_blocked" users will be automatically unblocked by LDAP synchronization - [x] When LDAP identity is removed, we should convert `ldap_blocked` into `blocked` Mockup for the Admin UI with both "ldap_blocked" and normal "blocked" users: ![image](/uploads/4f56fc17b73cb2c9e2a154a22e7ad291/image.png) There will be another MR for the EE version. See merge request !2242
| * Fix Admin/Users view to position buttons without spacing magicGabriel Mazetto2016-01-141-15/+15
| |
| * Prevent ldap_blocked users from being unblocked by the Admin UIGabriel Mazetto2016-01-081-1/+6
| |
* | Merge branch 'improve_more_buttons' into 'master' Jacob Schatz2016-01-121-2/+2
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Improve admin area button style A lot of the buttons in the top right in the admin area were too big. This makes those the new `btn-nr` size which seems to look nice. ## User buttons ### Current ![Screen_Shot_2016-01-08_at_2.29.30_PM](/uploads/8920d4a67ff4a20617e5b4d319ba154e/Screen_Shot_2016-01-08_at_2.29.30_PM.png) ### New ![Screen_Shot_2016-01-08_at_2.29.21_PM](/uploads/494741f6e92592ff2c60683f399bb1c1/Screen_Shot_2016-01-08_at_2.29.21_PM.png) ## Project edit button ### Current ![Screen_Shot_2016-01-08_at_2.29.59_PM](/uploads/09a2f8fddc45120510dd10758ce33c51/Screen_Shot_2016-01-08_at_2.29.59_PM.png) ### New ![Screen_Shot_2016-01-08_at_2.30.14_PM](/uploads/93a72a7c42b1974643b1e9ffd3ec8511/Screen_Shot_2016-01-08_at_2.30.14_PM.png) ## Label button ### Current ![Screen_Shot_2016-01-08_at_2.38.09_PM](/uploads/9cff790e1a4e2d650487c9765d0235a4/Screen_Shot_2016-01-08_at_2.38.09_PM.png) ### New ![Screen_Shot_2016-01-08_at_2.38.31_PM](/uploads/9462ff2393249eb762dc7cb92605c733/Screen_Shot_2016-01-08_at_2.38.31_PM.png) cc/ @jschatz1 @creamzy @skyruler See merge request !2351
| * | Improve admin area button styleDrew Blessing2016-01-111-2/+2
| |/
* | Add user's last used IP addresses to admin pageStan Hu2016-01-121-0/+16
|/ | | | This would help admins figure out from where spam is originating.
* Add two custom Date/Time conversion formatsRobert Speicher2016-01-072-5/+5
|
* Remove stamp gemRobert Speicher2016-01-072-5/+5
| | | | Closes #5908
* number_with_delimiter most of the thingsrs-delimit-all-the-thingsRobert Speicher2015-12-311-7/+7
|
* Merge branch 'master' into ui/form-consistencyDouwe Maan2015-12-031-1/+1
|\
| * Prevent impersonation if blockedAndrew Tomaka2015-12-021-1/+1
| |
* | Use consistent casing for page titlesDouwe Maan2015-12-021-3/+0
|/
* Fix Error 500 when viewing user's personal projects from admin pageStan Hu2015-11-252-1/+14
| | | | | | This is a regression introduced in 4d7f00f. Closes #3680
* Rewrite HTTP links to force TLS, where possibleAlex Jordan2015-11-161-2/+2
|
* refactor login as to be impersonation with better login/logoutJames Newton2015-10-291-1/+1
| | | | | | Modifies the existing "login as" feature to be called impersonation, as well as keeping track of who is impersonating to revert back to that user without having to log out.
* Partly implement new UI for user pageuser-page-new-uiDmitriy Zaporozhets2015-10-162-1/+32
| | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
* Re-use User objects for avatar_icon where possibleYorick Peterse2015-10-151-1/+1
| | | | This removes the need for running an extra SQL query in these cases.
* Merge branch 'spellcheck_false' into 'master' Dmitriy Zaporozhets2015-10-121-1/+1
|\ | | | | | | | | | | | | Add spellcheck=false to certain input fields https://dev.gitlab.org/gitlab/gitlabhq/issues/2563 See merge request !1559
| * Add spellcheck=false to certain input fieldsspellcheck_falseValery Sizov2015-10-121-1/+1
| |
* | Persist filters when sorting on user admin pageJerry Lukins2015-10-101-7/+7
|/
* Remove stuff from previous UIPavel Forkert2015-09-241-1/+1
|
* Move login button to user page, switched to POST methodPavel Forkert2015-09-242-1/+2
|
* Add option to admin area to sign in as a specific userPavel Forkert2015-09-241-1/+2
| | | | Closes #2291
* clarify confirmation text on user deletion.Hannes Rosenögger2015-09-211-1/+1
|
* Fix: User search feature in admin area does not respect filtersrespect_filtersValery Sizov2015-08-131-0/+1
|
* Add "Confirm user" button in user admin pageStan Hu2015-08-051-0/+10
| | | | | Closes #2116 Closes https://github.com/gitlabhq/gitlabhq/issues/9502
* Add a button to Admin::Users#show to disable 2FA for that userrs-disable-2fa-by-adminRobert Speicher2015-07-101-0/+1
|
* Add support for unlocking users in admin settingsStan Hu2015-07-022-0/+10
| | | | Closes https://github.com/gitlabhq/gitlabhq/issues/9381
View Lorry Controller Status